您现在的位置是:知識 >>正文
【】
知識63人已围观
简介If you own a Dell laptop or desktop then there's a very good chance your machine is vulnerable to at ...
If you own a Dell laptop or desktop then there's a very good chance your machine is vulnerable to attack simply by visiting a malicious website. The good news is, Dell has released a patch to close the security hole.
As ZDNet reports, 17-year-old security researcher Bill Demirkapi discovered a vulnerability (CVE-2019-3719) in the Dell SupportAssist utility which allows an attacker to remote execute code. This is achieved by getting a user to visit a specific website containing JavaScript code capable of tricking the SupportAssist app into downloading and running malicious files (with full admin rights). Importantly, no user interaction is required once the website has been visited and the JavaScript can be hidden inside an ad on a legitimate website.
Here's the remote code execution in action as recorded by Demirkapi:
Dell uses SupportAssist to pro-actively check the health of your hardware and software and then automatically updates each system as necessary. As you've probably guessed, it's a piece of software that gets pre-installed on most new Dell systems, meaning there's a lot of users out there potentially vulnerable to this attack.
Dell has known about the vulnerability since Oct. 26 last year and a patched version of SupportAssist (v3.2.0.90) is now available which closes the security hole. If you own a Dell which has SupportAssist installed, download and install the new version as soon as possible to protect your system.
Featured Video For You
Scientists successfully 3D-print heart from human cells
TopicsCybersecurityDell
Tags:
转载:欢迎各位朋友分享到网络,但转载请说明文章出处“夫榮妻貴網”。http://new.maomao321.com/news/71e21999709.html
相关文章
Professor says she'll bring gun to campus after members of the band kneel for anthem
知識This story was updated Wednesday morning after Tuten walked back her initial comments via Facebook. ...
【知識】
阅读更多Gorillaz will be headed to a television screen near you soon
知識Your favorite virtual band isn't going away for another seven years anytime soon.。 Come 2018, Gorill ...
【知識】
阅读更多Waymo is letting residents in Phoenix test its self
知識Google's self-driving car company Waymo just opened up a pilot program in Phoenix, Arizona, letting ...
【知識】
阅读更多
热门文章
- Bisquick's tone
- Daughter gives dad a fierce makeover all while he's sleeping
- The planning behind Fyre Festival, broken down by the numbers
- The planning behind Fyre Festival, broken down by the numbers
- UK to exempt Armed Forces from European convention on human rights
- World's second richest man has high praise for world's third richest man
最新文章
Dude accidentally buys three 5
Powerful gene
Apple shares photos and video of its fancy new store in Dubai
'Wootube' is the hit YouTube channel that's making math hella fun again
Top tickets for Guns N' Roses' Singapore concert will cost $1,500
Man ships $1 million family heirloom by express delivery, regrets it immediately